AX
Product
Axis2
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Axis2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-5785 | – | Nov 4 | Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… Affected: through 1.6.2; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5; +3 more |
| CVE-2012-5351 | – | Oct 9 | Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack," a… Affected: All versions, or not specified |
| CVE-2012-4418 | – | Oct 9 | Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." Affected: All versions, or not specified |
| CVE-2010-0219 | – | Oct 18 | Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account,… Affected: 1.3; 1.4; 1.4.1; 1.5; 1.5.1; 1.5.2; +1 more |
| CVE-2010-1632 | – | Jun 22 | Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for… Affected: through 1.5.1; 1.3; 1.4; 1.4.1; 1.5; through 1.5.1; +19 more |
| CVE-2010-2103 | – | May 27 | Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions,… Affected: 1.4.1; 1.5.1; 1.4.1; 1.5.1 |
Showing 6